THREAT OPS › Threat News › [GHSA] GHSA-qq9q-xgm3-xv9g (high) — Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url
[GHSA] GHSA-qq9q-xgm3-xv9g (high) — Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url
GHSA-qq9q-xgm3-xv9g Severity: high CVE: CVE-2026-67425
Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url
## Summary
`llm.chat` reads the operator's provider key from the environment (`OPENAI_API_KEY`, `ANTHROPIC_API_KEY`, ...) and sends it in the `Authorization: Bearer` header to `base_url`, a parameter the caller controls. `base_url` is only checked against the SSRF guard, and
Indicators of compromise
- CVE-2026-67425cve
- https://api.openai.com/v1url
- https://example.com`url
Original source: https://github.com/advisories/GHSA-qq9q-xgm3-xv9g